pricelees/roomescape-refactored
1
0
Fork 0
generated from pricelees/issue-pr-template
Code Issues 1 Pull Requests Actions Packages Projects Releases Wiki Activity

refactor: UserInterceptor에 관리자 토큰 검증 로직 추가

Browse Source
This commit is contained in:
이상진 2025-09-14 22:40:55 +09:00
parent 3d9a4c650e
commit aecf499ea5
1 changed files with 18 additions and 5 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

19
src/main/kotlin/roomescape/auth/web/support/interceptors/UserInterceptor.kt
View File

@ -8,6 +8,7 @@ import org.slf4j.MDC
import org.springframework.stereotype.Component import org.springframework.stereotype.Component
import org.springframework.web.method.HandlerMethod import org.springframework.web.method.HandlerMethod
import org.springframework.web.servlet.HandlerInterceptor import org.springframework.web.servlet.HandlerInterceptor
import roomescape.auth.business.CLAIM_ADMIN_TYPE_KEY
import roomescape.auth.exception.AuthErrorCode import roomescape.auth.exception.AuthErrorCode
import roomescape.auth.exception.AuthException import roomescape.auth.exception.AuthException
import roomescape.auth.infrastructure.jwt.JwtUtils import roomescape.auth.infrastructure.jwt.JwtUtils
@ -33,14 +34,26 @@ class UserInterceptor(
val token: String? = request.accessToken() val token: String? = request.accessToken()
try { try {
jwtUtils.extractSubject(token).also { val id: String = jwtUtils.extractSubject(token).also { MDC.put(MDC_PRINCIPAL_ID_KEY, it) }
MDC.put(MDC_PRINCIPAL_ID_KEY, it)
log.info { "[UserInterceptor] 인증 완료. userId=$it" } /**
* CLAIM_ADMIN_TYPE_KEY 가 존재하면 관리자 토큰임
*/
jwtUtils.extractClaim(token, key = CLAIM_ADMIN_TYPE_KEY)?.also {
log.warn { "[UserInterceptor] 관리자 토큰으로 접근 시도. userId=$id, adminType=$it" }
throw AuthException(AuthErrorCode.ACCESS_DENIED)
} }
log.info { "[UserInterceptor] 인증 완료. userId=$id" }
return true return true
} catch (e: Exception) { } catch (e: Exception) {
when (e) {
is AuthException -> { throw e }
else -> {
log.warn { "[UserInterceptor] 예상치 못한 예외: message=${e.message}" } log.warn { "[UserInterceptor] 예상치 못한 예외: message=${e.message}" }
throw AuthException(AuthErrorCode.TEMPORARY_AUTH_ERROR) throw AuthException(AuthErrorCode.TEMPORARY_AUTH_ERROR)
} }
} }
} }
}
}